File. 348:EUROPEAN PATENTS. 1978-2004/Dec W02 

(c) 2004. European Patent Office 
File 349:PCT FULLTEXT 197 9-2002/UB=2004 121 6, UT=2004 1209 

(c) 2004 WlPO/Univentio 

Set Items Description 

51 284776 CODE OR CODES OR CODED OR CODING? ? OR SUBCOD???? ? 

52 1231146 NUMBER? ? OR NUMERAL? ? OR NUMERIC?? ? OR ALPHANUMERIC? OR 

INTEGER? ? OR DIGIT? ? OR VALUE OR VALUES 

53 830126 SEQUENCE? OR SEQUENT? OR BIT OR BITS OR SUBSEQUEN? OR STRI- 

NG? ? OR STRINGS 

54 925795 POINT? OR IDENTIFIER? ? OR SUBKEY? ? OR SUB()KEY? ? 

55 30120 SI : S2 (3N) ADDITIONAL 

56 56 MICROCOD???? ? (3N) ADDITIONAL 

57 30959 (S1:S2 OR MICROD???? ?) (3N) (AUXILAR? OR AUXILIARY OR AUXIL- ■ 
L? OR' ADJUNCT? OR ANCILLAR? OR ANCILLrlA? OR SUPPLEMENT? . OR- IN- * 

DEX??? ?) 

58 262560 KEY? ? OR CIPHER? ? OR CYPHER? ? OR ALGORITHM? OR KEYPAIR? 

59 25116 S8(3N) (PARTIAL? OR PORTION? ? OR FRAGMENT? OR SECTION? OR -. 

PARTITION? OR PIECE? ? OR PART OR PARTS OR COMPONENT? OR SUBC- 
OMPONENT?) 

510 2726 S8 (3N) (SUBSET? OR SUB()SET? ? OR SEGMENT? OR FRACTION?) 

511 2191 S9:S10(5N) (GENERAT? OR DERIV??? ? OR DERI VAT? OR PRODUCE? ? 

OR PRODUCING OR PRODUCTION? ? OR PROD? ? OR CREAT???? ? OR C- 
ONSTRUCT?) 

512 1925 S9:S10(5N) (FORM OR FORMS OR FORMED OR FORMING OR FORMATION? 

? OR SYNTHESIS? OR SYNTHESIZ? OR ORIGINAT? OR DEVELOP?) 

513 54207 (SI: S3 OR MICROCOD???? ?) ( 3N) ADDITIONAL 

514 37702 (SI: S3 OR MICROD???? ?) (3N) (AUXILAR? OR AUXILIAR? OR AUXIL- 

L? OR ADJUNCT? OR ANCILLAR? OR ANCILLIA? OR SUPPLEMENT? OR IN- 
DEX??? ?) 

515 273 Sll : S12 ( 25N) (S4 OR S13:S14) 

516 21554 S8 (5N) (ENCRYPT? OR ENCIPHER? OR ENCYPHER? OR DECOD???? ? OR 

ENCOD???? ? OR INCOD???? ? OR UNENCOD? OR UNINCOD? OR DECRYP- 
•. . T? ),;•.-. - - . . .. . . 

517 1299 S8 (5N) (UNENCRYPT? OR UNENCIPHER? OR UNENCYPHER? OR DECIPHE- 

R? OR DECYPHER? OR UNCRYPT? OR UNCIPHER? OR UNCYPHER? OR UNCO- 
D???? ?) 



S18 


50 


S15(25N)S16:S17 


S19 


6945 


IC= f H04L-009' 


S20 


26 


S18 AND S19 


S21 


13 


S18/TI,AB,CM 


S22 


32 


S20:S21 


S23 


18 


S18 NOT S22 


S24 


18 


IDPAT (sorted in duplicate/non-duplicate order) 


S25 


17 


IDPAT (primary/non-duplicate records only) 



? t22/5, k/4-5 



22/5, K/ 4 (Item 4 from file: 348) 

DIALOG (R) File 348:EUROPEAN PATENTS 

(c) 2004 European Patent Office. All rts. reserv. 

01516132 

Method and apparatus for symmetric encryption/decryption of recorded data 
Verfahren und Vorrichtung zur symmetrischen Verschlusselung/Entschlus selling 

von aufgezeichneten Daten 
Methode et dispositif de cryptage/decryptage symmetrique de donnees 

enregis trees 
PATENT ASSIGNEE: 

Sony Computer Entertainment Inc., (3064090), 7-1-1 Akasaka, Minato-ku, 

Tokyo 107-0052, ( JP) , (Applicant designated States: all) 
Sony Corporation, (214031), 6-7-35 Kitashinagawa, Shinagawa-ku, Tokyo 
141-0001, (JP), (Applicant designated States: all) 
INVENTOR: 

Asano, Tomoyuki, c/o Sony Corporation, 6-7-35 Kitashinagawa, 

Shinagawa-Ku, Tokyo 141-0001, (JP) 
Ishibashi, Yoshihito, c/o Sony Corporation, 6-7-35 Kitashinagawa, 

Shinagawa-Ku, Tokyo 141-0001, (JP) 
Shirai, Taizo, c/o Sony Corporation, 6-7-35 Kitashinagawa, Shinagawa-Ku, 

Tokyo 141-0001, (JP) 
Akishita, Toru, c/o Sony Corporation, 6-7-35 Kitashinagawa, Shinagawa-Ku, 

Tokyo 141-0001, (JP) 
Yoshimori, Masaharu, c/o Sony Computer Entertainment, 7-1-1 Akasaka, 

Minato-ku, Tokyo 107-0052, (JP) 
Tanaka, Makoto, c/o Sony Computer Entertainment, 7-1-1 Akasaka, 
Minato-ku, Tokyo 107-0052, (JP) 
LEGAL REPRESENTATIVE: 

Robinson, Nigel Alexander Julian et al (69551), D. Young & Co., 21 New 
Fetter Lane, London EC4A IDA, (GB) 
PATENT (CC, No, Kind, Date) : EP 1267515 A2 021218 (Basic) 

EP 1267515 A3 040407 
APPLICATION (CC, No, Date) : EP 2002078475 010119; 

PRIORITY (CC, No, Date): JP 200013322 000121; JP 200015551 000125; JP 
' 200015858 000125; JP 200016029 000125; JP 200016213 000125; JP 
200016251 000125; JP 200016292 000125 
DESIGNATED STATES: AT; BE; CH; CY; DE; DK; ES; FI; FR; GB; GR; IE; IT; LI; 

LU; MC; NL; PT; SE; TR 
RELATED PARENT NUMBER (S) - PN (AN) : 

EP 1195734 (EP 2001901463) 
INTERNATIONAL PATENT CLASS: H04L-009/06 ; H04L-009/32 ; G11B-020/00 

ABSTRACT EP 1267515 A2 

A record reproducing player and save data processing methods capable of 
insuring security of save data are provided. Save data is stored in a 
recording device, encrypted with the use of a program's individual 
encryption key, e.g., a content key, or a save data encryption key 
created based the content key, and when reproducing the save data a 
decryption process is conducted on it with the use of the save data 
decryption key particular to the program. Furthermore, it is made 
possible to create save data encryption keys based on a variety of 
restriction information, such as performing the storing and reproducing 
of the save data by conducting encryption and decryption on the save data 
with the save data encryption keys and decryption keys created with the 
use of a record reproducing player's individual key or a user's password. 
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.SPECIFICATION data processing executed by the data processing apparatus 
is signature processing on data, the key generating step is a signature 

key generating step of executing encryption processing based on a 
signature key generation master key MKdev for generating a data 
processing apparatus signature key Kdev of the data processing 
apparatus and a data processing apparatus identifier , which is 
identification data of the data processing apparatus and generating the 
data processing apparatus... 

.key based on a distribution key generation master key for generating a 
contents data distribution key used for encryption processing on 
contents data and a contents identifier , which is the identifier of 
the provided contents data and executes encryption processing on the 
contents data, and the contents data utilization apparatus generates a 
contents data distribution key based on the distribution key 
generation master key and a contents identifier , which is the 
identifier of the provided contents data and executes decryption 
processing on the contents data. 

Furthermore, according ... comprises a recording data processing 
apparatus signature key master key MKdev and data processing apparatus 
identifier IDdev, characterized in that the encryption processing 
section generates a signature key Kdev as the data processing 
apparatus specific key through encryption processing based on the 
recording data processing apparatus signature key master key MKdev and 
the data processing apparatus identifier IDdev. 

Furthermore, in another embodiment of the data processing apparatus of 
the present invention, the encryption processing section generates 
the signature key Kdev through DES encryption processing applying the ■ 
recording data processing apparatus signature key master key MKdev to the 
data processing apparatus identifier IDdev. 

Furthermore, in another embodiment of the data processing apparatus of 
the present invention, the... 
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ABSTRACT EP 1303075 Al 

To provide a data access management system that enables access control 
management for data files stored in a memory of a device. The system 
manages data access processing performed by an access unit for a 
memory-loaded device, and issues a service permission ticket (SPT) , which 
serves as an access control ticket in which an access mode to be accepted 
for the access unit, such as a reader/writer, is set. The memory-loaded 
device receives the service permission ticket (SPT) from the access unit, 
and performs processing according to the access mode indicated in the 
service permission ticket (SPT) . The service permission tickets (SPTs) in 
which access modes to be accepted for the access units are set are 
individually issued according to the access units. Accordingly, various 
modes of access according to the access units can be executed. 
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...SPECIFICATION S659) , the device creates a pair of a public key (PUB PAR) 
and a private key (PRI PAR) by using the encryption processor (see 
Fig. 5) in the, device, and writes the created keys into the 
partition key area (see Fig. 23) (S660) . Then, the device makes 
adjustments of the pointer , the size, and the free block number in 
device, which are required due to the... 
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ABSTRACT EP 421409 A2 

An improved security system is disclosed which uses especially an IC 
card to enhance the security functions involving component 
authentication, user verification, user authorization and access control, 



protection of message secrecy and integrity, management of cryptographic 
keys, and auditablity. Both the security method and the apparatus for 
embodying these functions across a total system or network using a common 
cryptographic architecture are disclosed. Authorization to perform these 
functions in the various security component device nodes in the network 
can be distributed to the various nodes at which they will be executed in 
order to personalize the use of the components. 
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..SPECIFICATION keys in secure fashion in order to initialize the security 
processor. That, after the master key entered in p&rts , is used to 
generate other keys for distribution to other devices at other nodes in 
the secure' network. 

The directory server task 157 contains the pointers and program 
routines to allow the security server to access encryption keys and 
other information needed to perform its cryptographic functions, 
interfacing with PC DOS file access... 
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Detailed Description 

Claims 

Fulltext Word Count: 11042 
English Abstract 

An enterprise-based system includes a storage server equipped to generate 
a split encryption key having at least a first key portion and a second 
key portion, that is used by the storage server to encrypt at least a 
portion of a message. Additionally, the first key portion of the split 
encryption key is retained by the storage server, while the second key 
portion of the split encryption key is delivered to a message routing 
server and is discarded from the storage server. The message routing 
server in turn provides the second key portion to one or more recipients 
of the message to facilitate recipient access to the message. 

French Abstract 

L f invention concerne un systeme utilise dans le reseau d ! une entreprise, 
comprenant un serveur de stockage concu pour produire une cle de 
chiffrement fractionnee comportant au moins une premiere partie et une 
seconde partie, utilisee par le serveur de stockage pour chiffrer au 
moins une partie d'un message. Par ailleurs, la premiere partie de la cle 
de chiffrement fractionnee est conservee par le serveur de stockage alors 
que la seconde partie de la cle de chiffrement fractionnee est fournie a 
un serveur de routage de messages et supprimee du serveur de stockage. 

Legal Status (Type, Date, Text) 

Publication 20040219 Al With international search report. 
Publication 20040219 Al Before the expiration of the time limit for 

amending the claims and to be republished in the 
event of the receipt of amendments. 
...International Patent Class: H04L-009/08 
Fulltext Availability: 
Claims 

Claim 

the second key portion. 
12 In a storage server, a method comprising: 

generating a split encryption key to encrypt a message, the split 

encryption key comprising at least a first key portion and a 
second key portion ; 



generating a message identifier corresponding to the message; 
I 0 generating one or more recipient-individualized tokens, each 
recipient . . . 
? t22/5,k/22,24 

22/5, K/22 (Item 6 from file: 349) 

DIALOG (R) File 34 9:PCT FULLTEXT 

(c) 2004 WIPO/Univentio. All rts . reserv. 

01006378 **Image available** 
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Publication Language: English 
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Detailed Description 

Claims 

Fulltext Word Count: 3397 
English Abstract 

A copy protection program (104) for securely holding digital audio and/or 
video content is bound to a particular device (100) via a key (200) 
derived in part (201) from unique or distinctive hardware, software 
and/or firmware identifiers within the device and in part (202) from a 
random or pseudo-random number. The key (200) is checked or rebuilt 
whenever the copy protection program (104) is employed to access 
protected digital content, either authorizing/prohibiting such access to 
the content or enabling/precluding proper decoding of the content. 
Therefore the digital content need not be directly bound to the device 
(100) while circumvention of the copy protection is frustrated. 

French Abstract 

La presente invention concerne un programme de protection contre la copie 
(104) permettant de conserver, de maniere sure, un contenu audio et/ou 
video numerique. Ledit programme est lie a un dispositif particulier 
(100) au moyen d'une cle (200) derivee dans la partie (201) 
d' identif icateurs materiels, logiciels et/ou micrologiciels uniques ou 
distincts presents dans le dispositif et dans la partie (202) d ! un nombre 
aleatoire ou pseudo-aleatoire . La cle (200) est verifiee ou reconstituee 
chaque fois que le programme de protection contre la copie (104) est 
utilise pour acceder au contenu numerique protege, autorisant/empechant 



un tel acces au contenu ou permettant/interdisant le decodage approprie 
du contenu. Ainsi, le contenu numerique ne doit pas necessairement etre 
directement lie au dispositif (100) tant que le contournement de la 
protection contre la copie est neutralise. 

Legal Status (Type, Date, Text) 

Publication 20030501 A2 Without international search report and to be 
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Search Rpt 20040318 Late publication of international search report 

Republication 20040318 A3 With international search report. 
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Fulltext Availability: 
Claims 

Claim 

and the stored value relating to the key; and 
employing the computed value for the key to decrypt the protected 
content . 

3 The system as set forth in Claim 2 wherein the key is derived in 
part from a plurality of preselected unique or distinctive identifiers 
for hardware, software or firmware within the device. 

4 The system as set forth in. . . 
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Fulltext Availability: 

Detailed Description 

Claims 

Fulltext Word Count: 15128 
English Abstract 

In a communications system, transmission takes place in discrete time 
period bursts and a stream cipher algorithm is used to generate a key 
stream portion for encrypting information bits to be transmitted in a 
single transmission burst. The length of the key stream portion generated 
for encryption of the next transmission burst is adjust on the basis of 
the number of said information bits to be transmitted in the next 
transmission burst. Application to any communications system which 
produces a stream cipher, like, for example, GSM, TETRA, DECT, GPRS, EDGE 
and UMTS. 

French Abstract 

Dans un systeme de communication les transmissions s'effectuent par 
rafales dans des creneaux temporels discrets et on utilise un algorithme 
de cryptage en continu pour creer une portion de sequence de clefs de 
destinee a crypter des bits d* information en vue de leur transmission en 
une seule rafale de transmission. La longueur de la portion de la 
sequence de clefs servant a coder la prochaine rafale de transmission est 
modifiee en fonction du nombre de bits d 1 information contenus dans ladite 
prochaine rafale. Ce procede s 1 applique a tout systeme de communication 
utilisant le cryptage en continu tels que GSM, TETRA, DECT, GPRS, EDGE et 
UMTS. 

Legal Status (Type, Date, Text) 
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Detailed Description 

Claims 

Detailed Description 

... or alter some other 

input value which is then combined with the initial 

input cryptographic key to generate the encryption keys 

to be used in the key stream segment generating 
algorithm (e.g. by repeating them in some order to form 

a suitable input number ) , and the additional , 

key-varying parameter could be ...incrementing or 

decrementing its value. 

In a particularly preferred embodiment of the present 
invention, one value of the additional parameter (e.g. 
key segment number) is selected such that it will give 
the same encryption key for use in the key stream 
segment generating algorithm as would be the case when 



no additional parameter is used in generating the 

encryption key (e.g. no additional parameter is combined 
with the common input key), i.e. the... any 
event) . If more key stream segments are required for a 
given burst, then additional encryption keys and key 
stream segments can be generated by changing the value 
of the additional parameter as discussed above. 

In the above aspects and embodiments of the present 
invention, it would be possible to vary only the 

encryption key used in the key stream segment generating 
algorithm to vary the key stream segments making up the 
key stream. . .be noted that in these arrangements, the 
initialisation vector repeat period for a given initial 

encryption key (i.e. the key supplied to the 
communication unit) is not altered (since although 

additional initialisation vector values are used for the 
additional key stream segment , that use is with 
different, derived encryption keys , not the initial 

encryption key ) . Thus each initial encryption key and 
initialisation vector combination still only occur once 
during the original lifetime of an initialisation ... its value. 

In a particularly preferred embodiment of the present 
invention, as for the multiple encryption key generation 
process, the multiple initialisation vector generation 
- 27 

process is preferably such that one value of the 
additional parameter (e.g. key segment number) can be 

(and is) selected such that it will give the same 

initialisation vector for use in the key stream segment 
generating algorithm as would be the case when no 

additional parameter is used in generating the 

initialisation. . . 

. g. no additional parameter is 

combined with the initial initialisation vector) . 

Most preferably the same value of the additional 
parameter as gives an "unchanged" encryption key also 
gives an "unchanged" initialisation vector, as then in 
that case the same overall output key stream segment is 

produced as would be produced by equipment not using the 
additional parameter. This can allow backwards 
compatibility with existing equipment which does not 
generate additional encryption keys and/or 
initialisation vectors from the input key and 
initialisation vector, as by setting the additional 
parameter to this particular value, the encryption key 
stream generator will generate the same key stream 

segment as would be used by the existing equipment. The 
particular additional parameter value that does this . . . key 
stream segments are required for a given burst, then 
additional initialisation vectors, and/or encryption 

keys , and key stream segments can be generated by 
changing the value of the additional parameter as 
discussed above. 



As discussed above, the present invention is 

particularly, although not exclusively. . .produces further different 



initialisation vectors, IVb and IVc. These additional 
initialisation vectors are used in key stream segment 
generator 2 together with their corresponding additional 
encryption cipher keys 9a (i.e. the encryption cipher 
key 9a generated using the same key segment number) to 
generate additional key stream segments KSSa, KSSb and 
KSSc which can, as discussed above, be appended to the 
basic key stream segment KSS to encipher or decipher 
longer (in terms of numbers of bits) transmission 
bursts . 



Claim 

parameter is varied for each 
encryption key generated in such a way that generating 
an encryption key with each additional parameter value 
produces a different output encryption key T 

16 The method of any one of claims 10 to 15, wherein 
one value of the additional parameter gives the same 

encryption key for use in the key stream segment 
generating algorithm as would be the case when no 
additional parameter is used in generating the 
encryption key . 

17 The method of claim 16, comprising using the 

particular value of the additional parameter ... the input key using an 
additional 

parameter, wherein the additional parameter is varied 
for each encryption key generated in such a way that' 
generating an encryption key with each additional 
parameter value produces a different output encryption 
key . 

54 An apparatus for generating two or more 
initialisation vectors for use in a stream cipher key 
stream segment generating algorithm , the apparatus 
comprising: 

means for generating each of the' two or more 
- 57 

initialisation vectors from an input initialisation 
vector using. . . 
? t22/5,k/27, 29 
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Claims 

Fulltext Word Count: 64 41 
English Abstract 

The common encryption of content material is provided for decryption at a 
plurality of destination devices, each destination device having a unique 
private key of a public-private key pair. A multiple device key exchange 
is utilized to create a session key for encrypting the content material 
that is based on each of the public keys of the plurality of destination 
devices. The content material is encrypted using this session key. A 
partial key is also created for each of the intended destination devices 
that relies upon the private key of the destination device to form a 
decryption key that is suitable for decrypting the encrypted content 
material. The encrypted content material and the corresponding partial 
key are communicated to each destination device via potentially insecure 
means, including broadcast over a public network. Each destination device 
decrypts the encrypted content material using the decryption key that is 
formed from its private key and the received partial key. Including or 
excluding the public key of selected destination devices in the creation 
of the session key effects selective encryption. 

French Abstract 

L 1 invention concerne le chiffrement ordinaire d'un contenu destine au 
decryptage au niveau de plusieurs dispositifs destinataires, chaque 
dispositif possedant une cle privee unique d'une paire de cles 
privees-publiques . On utilise un echange de cles du dispositif multiple 
pour creer une cle de session permettant de chiffrer le contenu qui est 
fonde sur chacune des cles publiques de plusieurs dispositifs 
destinataires. Le contenu est chiffre a 1 1 aide de cette cle de session. 
On cree egalement une cle partielle pour chacun des dispositifs 
destinataires souhaites qui depende de la cle privee du dispositif 
destinataire pour constituer une cle de decryptage appropriee au 
decryptage du contenu chiffre. Ce dernier et la cle partielle 
correspondante sont communiques a chaque dispositif destinataire par le 
biais d'un dispositif potentiellement non protege, y compris la diffusion 
sur un reseau publique . Chaque dispositif destinataire decrypte le 
contenu code a l f aide de la cle de decryptage qui est constituee a partir 
de sa cle privee et de la cle partielle recue. Inclure ou exclure la cle 
publique des dispositifs destinataires selectionnes lors de la creation 
de la cle de session agit sur le chiffrement selectif. 
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Detailed Description 

Xy2 mod n, and so on. 

Each destination device 250, 2 60, 270, 280 forms a decryption key 
255, 265, 275, 285 by forming the product of its corresponding partial 

key 225, 226, 227, 228 and its sub - key 450, 460, 470, 480. As 
illustrated in FIG. 4, because each sub key Xy mod n is equivalent to 
Yx mod n (because (g ! )y mod n = (gy. . . 

...encrypted content EK' (M) 53 1. 

When each of the devices Dl, D3, and D4 form the product of its sub - 
key and its partial key 525-528, the corresponding decryption key 
555, 575, 585 is computed to be equal to (Yl *Yz*Y3*Y4)x mod... 
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Fulltext Word Count: 5402 
English Abstract 

Controlling the usage of a software component (16) by an application 
program (12) in an end user computer system (10) includes obtaining an 
identifier of the application program by a controller computer system 
(24) and generating a first password from the received application 
program identifier and an identifier of the component. The component, the 
component's identifier and the first password are communicated to the end 
user computer system. The component is registered with the application as 
a "snap-in" or "plug-in" component. The application program generates a 
second password from the application program identifier and the received 



component identifier, compares the first password and the second 
password, and allows use of the "snap-in" component by the application 
program on te end user computer system when the first password matches 
the second password. 
French Abstract 

L 1 invention concerne la commande de 1 1 utilisation d'un composant 
logiciel (16) par un programme d f application (12) dans un systeme 
informatique individuel (10), grace a l ! obtention d'un identif icateur du 
programme d 1 application par un systeme informatique de commande (24) et 
la generation d'un premier mot de passe a partir de 1 1 identif icateur de 
programme d 1 application recu et d'un identif icateur du composant. Le 
composant, 1 ' identif icateur de composant et le premier mot de passe sont 
communiques au systeme informatique individuel. Le composant est 
enregistre avec le programme d 1 application comme composant "inserable" ou 
"enf ichable" . Le programme d' application genere un deuxieme mot de passe 
a partir de 1 1 identif icateur de programme d 1 application et de 
1 1 identif icateur de composant recu, compare le premier mot de passe au 
deuxieme mot de passe, et autorise 1 ' utilisation du composant "insere" 
par le programme d' application dans le systeme informatique individuel 
lorsque le premier mot de passe correspond au deuxieme mot de passe. 

Main International Patent Class: H04L-009/32 
Fulltext Availability: 

Detailed Description 

Claims 
Detailed Description 

... not restricted in scope in this respect. 

At block 206, the controller security control operation creates an 
encrypted component key , using an unique identifier for the 
requested component and the secret encryption key as input data. As 
with generation of the application key, in one embodiment, the component 
key may be encrypted according to the well known DES technique, 
although other encryption techniques may also be employed. . . 

...of the present invention. The application license number 230 provided by 
the end user is encrypted using the secret encryption key 232 to 
produce application key 234. Similarly, component identifier (ID) 236 
is encrypted with the secret encryption key 232 to produce 
component key 238. The application key and the component key are 
then encrypted with the secret encryption key to produce the 
component password 240. In another embodiment, different encryption 
keys may be used to generate the application key, the component key, and 
the component password. . . 

Claim 

... 5, wherein generating the second password comprises: 

creating a first key from the application program identifier ; 
creating a second key from the received component identifier ; and 
creating the second password from the first and second keys. 

7 The method of claim 6, wherein creating the first key comprises 
encrypting at least a portion of the application program identifier with 
a secret encryption key. 

8... 13, wherein generating the first password comprises: 
creatinv a first key from the application program identifier ; 
creatin a second key from the component identifier ; and 

9 

creating the first password from the first and second keys . 



16 The method of claim 15, wherein creating the first key comprises 
encrypting at least a portion of the application program identifier with 
a secret encryption key. 

17. . . 

...creating the first password comprises 

encrypting a combination of the first key and the second key with a 
secret encryption key . 

19 The method of claim 14, wherein generating the second password 
comprises : 

creating- a third key from the application program identifier ; 

creating a fourth key from the communicated component identifier ; 
and 

creating the second password from the third and fourth keys. 

20 The method of claim 19, wherein creating the third key comprises 
encrypting at least a portion of the application program identifier with 
a secret encryption key. 
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CODE OR CODES OR CODED OR CODING? ? OR SUBCOD???? ? 


S2 


2843699 


NUMBER? ? OR NUMERAL? ? OR NUMERIC?? ? OR ALPHANUMERIC? OR 
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Method and apparatus for encoding and decoding file using basic and 

disposable keys 
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Patent No Kind Date Applicat No Kind Date Week 
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Priority Applications (No Type Date) : KR 200057063 A 20000928 
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Patent No Kind Lan Pg Main IPC Filing Notes 
KR 2002025343 A 1 G09C-001/00 

Abstract (Basic) : KR 2002025343 A 

NOVELTY - A method and apparatus for encoding and decoding file 
using basic and disposable keys are provided to generate and encode 
a password key based on basic and disposable keys and form 
information having the disposable key as a header. 

DETAILED DESCRIPTION - A basic , key generation storage section 
(501) generates an initial key based on a user 1 input information and 
time information of an encoding system. The basic key generation 
storage section (501) generates a random number having the initial 
key as a seed. The basic key generation storage section (501) 
stores the random number as a basic key. A disposable key 
generator (507) receives time information of a time point when a 
plaintext file is encoded, drives a random number generator using the 
data as a seed, and outputs a resulting disposable key. A password key 
generator (503) generates a password key based on the basic and 
disposable keys . A first encoder (505) receives the password key , 
encodes a plaintext file, and outputs encoded data. A second 
encoder (509) sets the encoded data as a password file body, sets 
information having the disposable key as a password file header, and 
outputs a final encoded file. 

pp; 1 DwgNo 1/10 

Title Terms: METHOD; APPARATUS; ENCODE; DECODE; FILE; BASIC; DISPOSABLE; 
KEY 

Derwent -Class: P85 

International Patent Class (Main) : G09C-001/00 
File Segment: EngPI 



17/9/5 (Item 5 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2004 Thomson Derwent. All rts. reserv. 

011377543 **Image available** 

WPI Acc No: 1997-355450/199733 

XRPX Acc No: N97-294785 

Individual authentication system for cash transaction service system in 
bank - compares decoded finger print information with predetermined 



information that is not enciphered and if both are in agreement, it is 
judged that individual authentication is carried out 
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Patent No Kind Lan Pg Main IPC Filing Notes 
JP 9147072 A 6 G06K-017/00 

JP 3564673 B2 8 G06K-017/00 Previous Publ . patent JP 9147072 

Abstract (Basic) : JP 9147072 A 

The system includes an individual authentication card which has a 
finger print reader (11) and an encryptment key formation part 
(12) . The encryptment key formation part provides an encrypted 

key according to the combination of the finger point information 
read by finger print reader and the attribute of the individual 
authentication card. A predetermined information is enciphered using an 
encipherment part (14). A terminal equipment (20) has a signal sending 
out unit to send out the ID of the user corresponding to the read 
finger print. 

An open key management system stores the open key according to the 
user ID received from the terminal equipment. A decoder decodes. the 
encrypted predetermined information. A communication network transmits 
the predetermined information that is not enciphered and this 
information is compared with the output of the decoder and if both are 
in agreement, it is judged that the individual authentication is 
carried out . 

ADVANTAGE - Prevents risk of being robbed of finger print 
information . 
Dwg. 1/2 
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Personal computer with encrypted programs - has microprocessor 
determining which encryption key to fetch from read only store and 
uses key to decode program 

Patent Assignee: IBM CORP (IBMC ) 
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Patent No Kind Date Applicat No Kind Date Week 
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Priority Applications (No Type Date) : GB 877850 A 19870402 
Patent Details : 

Patent No Kind Lan Pg Main IPC Filing Notes 
GB 2203271 A 12 

Abstract (Basic) : GB 2203271 A 

A microprocessor operates under control of a read only store and 
code stored in random access memory. The microprocessor receives 
programs in encrypted form and from a program imbedded encryption 
key identifier or identifiers determine which encryption key 
or keys to fetch from the read only store and subsequently uses the 
fetched key or keys to decode . The latter involves the received 
encoded/encrypted program being decrypted to load a decoded/decrypted 
code into the random access memory for subsequent execution. 

One or more keys may be reserved for use with unencrypted programs. 
The read only store contains a table containing the encryption keys 
. The microprocessor forms part of an adaptor by which an 
input /output device may be connected to a system bus. 

ADVANTAGE - Prevents unauthorised copying of programs. 

1/6 

Title Terms: PERSON; COMPUTER; ENCRYPTION; PROGRAM; MICROPROCESSOR; 

DETERMINE; ENCRYPTION; KEY; FETCH; READ; STORAGE; KEY; DECODE; PROGRAM 
Derwent Class: T01 
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Portable electronic cryptographic device - has keyboard and display with 
circuitry which can encipher and decipher plain text using randomised 
message key 
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Abstract (Basic) : US 4229817 A 

The device incorporates a random code generator for generating a 
randomised message key which, together with the keyboard inputs, 
initiates and generates a long sequence of randomised letters for 
enciphering purposes. In a deciphering mode, a predetermined message 
key may be entered to set the random code generator at a point to 
generate the originally entered plain text. 

A basic key composed of multiple segments fully initialises the 
random code generator such that more than one device could be used to 
encipher and decipher text. By using different segments of the basic 



key, varying levels of security can be obtained. Test circuitry is 
provided to insure maintenance of the proper key variables and proper 
operation of the device. 

Title Terms: PORTABLE; ELECTRONIC; CRYPTOGRAPHIC; DEVICE; KEYBOARD; DISPLAY 
; CIRCUIT; CAN; ENCIPHER; DECIPHER; PLAIN; TEXT; RANDOM; MESSAGE; KEY 
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ABSTRACT 



PROBLEM TO BE SOLVED: To give a permission to browse contents from the 
outside of an information terminal and to protect the contents. 



SOLUTION: The contents stored in a storage device are transferred to the 
information terminal 20, and when a user browses them, the information 
terminal 20 ciphers the contents by a cipher key different at each time and 
reads them. The information terminal 20 requests a decipher key 

corresponding to the identifier of the cipher key to a telephone 
corresponding machine 30. A deciphering part 21 performs deciphering by 
using the decipher key notified from the decipher key generation 

part 31 of the telephone corresponding machine 30 and outputs the 
contents to the user. 

COPYRIGHT: (C) 2003, JPO 
? tl7/9/16-17 
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ABSTRACT 

PROBLEM TO BE SOLVED: To provide the cipher communicating method of a 
facsimile equipment, in which a cipher sentence is difficult to be 
decoded by a third person, by using a self-synchronous stream ciphering 
method. 

SOLUTION: When a reception-side facsimile equipment is provided with a 
cipher communication function, cipher communication is possible and 
therefore a transmission-side facsimile equipment selects the index 

number of an index for initial value selection and the index 

number of an index for register selection, which are stored in a 
storage part 4, based on a communication date from a date data generation 
part 2. Then, data encoded in an encoding part 15 is ciphered by using a 
cipher key system generated in a cipher key system generation part 

3 and the cipher sentence is generated . When cipher communication is 
sent from the transmission-side facsimile equipment, the reception-side 
facsimile equipment similarly selects the index number of the index 

for initial value selection and the index number of the index for 
register selection based on the communication date. Then, the cipher 
sentence is made into a normal sentence based on the cipher key system 
generated in the generation part 3 . 
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ABSTRACT 

PURPOSE: To allow the transmitter-receiver to cope with a fact that the 
strength of ciphering is high and a common key might be decoded by 
storing plural common key data in advance and revising the common key 
under a prescribed condition. 

CONSTITUTION: A sender side is provided with a key generating section 
1 generating plural kinds of sub keys based on a prescribed common 

key K(sub 1). The common key K(sub 1) fed to the key generating 
section 1 is selected alternatively by a key data selection section 2 

from plural common keys K(sub 1)-K(sub n) stored in advance in a memory of 

a transmission side and a data random section 3 uses sub keys K(sub 



l).K(sub 1)-K(sub 1) ,K(sub n) of the key generating section 1 to 
generate a ciphered sentence K/D according to a prescribed algorithm from 
transmission data D. A key data generating section 11 on a receiver 
side generates plural kinds of sub keys K(sub l).K(sub 1)-K(sub 
1) . K(sub n) based on the common key K(sub 1) and a data random section 13 
decodes the ciphered sentence K.D received from a reception section 15 
according to a prescribed algorithm. The key data selection section 2 on 
the sender side selects a common key under a certain condition such as that 
after lapse of prescribed time. 
9 



File 6:NTIS 1964-2004 /Dec Wl 

(c) 2004 NTIS, Intl Cpyrght All Rights Res 
File 2:INSPEC 1969-2004 /Dec W2 

(c) 2004 Institution of Electrical Engineers 
File 8:Ei Compendex (R) 1970-2004 /Dec W2 

(c) 2004 Elsevier Eng. Info. Inc. 
File 34 :SciSearch(R) Cited Ref Sci 1990-2004 /Dec W2 

(c) 2004 Inst for Sci Info 
File 35 : Dissertation Abs Online 1861-2004 /Dec 

(c) 2004 ProQuest Inf o&Learning 
File 65: Inside Conferences 1993-2004 /Dec W3 

(c) 2004 BLDSC all rts. reserv. 
File 94: JICST-EPlus 1985-2004 /Nov W2 

(c)2004 Japan Science and Tech Corp(JST) 
File 95:TEME-Technology & Management 1989-2004 /Jun Wl 

(c) 2004 FIZ TECHNIK 
File 99: Wilson Appl . Sci & Tech Abs 1983-2004 /Nov 

(c) 2004 The HW Wilson Co. 
File 111:TGG Natl . Newspaper Index(SM) 197 9-2004 /Dec 16 

(c) 2004 The Gale Group 
File 144: Pascal 1973-2004 /Dec Wl 

(c) 2004 INIST/CNRS 
File 202:Info. Sci. & Tech. Abs. 1 966-2004 /Nov 02 

(c) 2004 EBSCO Publishing 
File 233: Internet & Personal Comp. Abs. 198 1-2003/Sep 

(c) 2003 EBSCO Pub. 
File 256:TecInfoSource 82-2004/Nov 

(c) 2004 Info. Sources Inc 
File 266:FEDRIP 2004/Sep 

Comp & dist by NTIS, Intl Copyright All Rights Res 
File 434:SciSearch(R) Cited Ref Sci 1974-1989/Dec 

(c) 1998 Inst for Sci Info 
File 483:Newspaper Abs Daily 198 6-2004 /Dec 18 

(c) 2004 ProQuest Inf o&Learning 
File 583:Gale Group Globalbase (TM) 198 6-2002/Dec 13 

(c) 2002 The Gale Group 
File 603:Newspaper Abstracts 1984-1988 

(c)2001 ProQuest Inf o&Learning 

Set Items Description 

51 1112532 CODE OR CODES OR CODED OR CODING? ? OR SUBCOD???? ? . 

52 8734498 NUMBER? ? OR NUMERAL? ? OR NUMERIC?? ? OR ALPHANUMERIC? OR 

INTEGER? ? OR DIGIT? ? OR VALUE OR VALUES 

53 3094843 SEQUENCE? OR SEQUENT? OR BIT OR BITS OR SUBSEQUEN? OR STRI 

NG? ? OR STRINGS 

54 2971116 POINT? OR IDENTIFIER? ? OR SUBKEY? ? OR SUB () KEY? ? ■ 

55 22105 {SI: S3 OR MICROCOD???? ?) ( 3N) ADDITIONAL 

56 72370 (SI: S3 OR MICROCOD???? ?) (3N) (AUXILAR? OR AUXILIAR? OR AUX 

ILL? OR ADJUNCT? OR ANCILLAR? OR ANCILLIA? OR SUPPLEMENT? OR 
INDEX??? ?) 

57 2769814 KEY? ? OR CIPHER? ? OR CYPHER? ? OR ALGORITHM? OR KEYPAIR? 

58 78351 S7 (3N) (PARTIAL? OR PORTION? ? OR FRAGMENT? OR SECTION? OR 

PARTITION? OR PIECE? ? OR PART OR PARTS OR COMPONENT? OR SUBC 
OMPONENT?) 

59 24897 S7 (3N) (SUBSET? OR SUB()SET? ? OR SEGMENT? OR FRACTION?) 

510 4824 S8:S9(5N) (GENERAT? OR DERIV??? ? OR DERI VAT? OR PRODUCE? ? 

OR PRODUCING OR PRODUCTION? ? OR PROD? ? OR CREAT???? ? OR CO 
NSTRUCT?) 

511 6598 S8:S9(5N) (FORM OR FORMS OR FORMED OR FORMING OR FORMATION? 

? OR SYNTHESIS? OR SYNTHESIZ? OR ORIGINAT? OR DEVELOP?) 

512 35716 S7(5N) (ENCRYPT? OR ENCIPHER? OR ENCYPHER? OR DECOD???? ? O 



ENCOD???? ? OR INCOD???? ? OR UNENCOD? OR UNINCOD? OR DECRYP- 
T?) 

513 431 S7(5N) (UNENCRYPT? OR UNENCIPHER? OR UNENCYPHER? OR DECIPHE- 

R? OR DECYPHER? OR UNCRYPT? OR UNCIPHER? OR UNCYPHER? OR UNCO- 
D???? ?) 

514 917 S10:S11 AND S4:S6 

515 32 S14 AND (ENCRYPT? OR ENCIPHER? OR ENCYPHER? OR DECOD???? ? 

OR ENCOD???? ? OR INCOD???? ? OR UNENCOD? OR UNINCOD? OR DECR- 
YPT?) 

516 2 S14 AND (UNENCRYPT? OR UNENCIPHER? OR UNENCYPHER? OR DECIP- 

HER? OR DECYPHER? OR UNCRYPT? OR UNCIPHER? OR UNCYPHER? OR UN- 
COD???? ?) 

517 33 S15:S16 

518 11 S17/2000:2004 

519 22 S17 NOT S18 

520 14 RD (unique items) 



20/7/11 (Item 3 from file: 35) 

DIALOG (R) File 35 : Dissertation Abs Online 

(c) 2004 ProQuest Inf o&Learning . All rts. reserv. 

913063 ORDER NO: AAD86-07767 

INTEGRATING HIERARCHICALLY SIGNIFICANT PART NUMBERS TO BILL OF MATERIALS 
PROCESSING (DATA STRUCTURES) 

Author: KINI, RAN JAN BAILUR 
Degree: D.B.A. 
Year: 1985 

Corporate Source/Institution: TEXAS TECH UNIVERSITY (0230) 
Source: VOLUME 47/02-A OF DISSERTATION ABSTRACTS INTERNATIONAL. 
PAGE 573. 128. PAGES 



The Bill of Materials is the front-end information required in the 
material planning function of an organization. Processing of the Bills of 
Materials in an organization is usually computerized. Products can be 
exploded and requirements for the production schedule can be. planned in an 
efficient and timely manner. Currently, bill processing is performed by 
maintaining two separate direct access files—Item Master File and Product 
Structure File. By linking these two files through "pointers , product 
explosion or implosion is accomplished. This method, since it incurs a 
large number of disk accesses, slows down Master Production Schedule 
explosion in material planning. Most major commerical software are using 
basically the same logic in their bill processing applications. 

Although part numbers are not related to bill processing other 
than to uniquely identify a part, a new part numbering scheme indicated an 
opportunity to use it in bill processing. This Hierarchically Significant 
Part Numbering (HSPN) scheme through its unique encoding / decoding part 

numbering algorithm generates a numerator/denominator part number 
embedding the parent-child linkage information in it. 

This information about the structure is used in developing the 
HSPN approach to bill processing. This approach not only identifies a part 
uniquely but also helps out substantially in the data processing function 
of bill processing by exploding and imploding a product much faster. 

The HSPN approach is compared to the current link listing approach 
for its performance in explosion/implosion queries. The testing is 
conducted by simulating both the approaches and actually counting 
instruction operations for each query. For data, a set of complex product 
structures used in several other research is used. 

The results have indicated the HSPN approach to be far superior to 
the current link listing approach. When the tables of part numbers used in 
the HSPN approach are kept in entirety in the main memory the HSPN approach 
performed significantly better by a factor of 150 in all explosion and 



implosion queries; whereas, when only the partial segments of tables are 
brought into the main memory the HSPN performed moderately better than the 
current approach. Regardless, the HSPN approach has shown a new way of 
processing the bills and an approach to process the bill significantly 
faster than with the traditional approach. 
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ABSTRACT: In this paper, traditional Vernam cipher is investigated and the 
improved cryptograph having a procedure-open-type algorithm with a new 
mixing function in the key generation part of the Vernam cipher 
is proposed. The main improvement point is to generate a non-periodic 
long random sequence and to attain the high security, by using the 
AMIDA lottery structure for the part of generation on the key stream of 
the Vernam cipher. In this method, the entrance of the AMIDA structure 
and also the random seed of the random sequence generator situated at 
the exit of the AMIDA structure, are changed after each one block 
encipher ( decipher ) . (author abst . ) 
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ABSTRACT EP 1093045 Al 

An authentication device method and program collates and preferably 
encrypts information for authentication. 

Collation information comprises anatomical information, such as finger 
print feature information, etc., and identification information. For the 
identification information, the serial number or equipment description of 



a device by which the anatomical information is collected, information 
about a route taken between a collection device, and an authentication 
device or serial number attached to anatomical information collected by a 
specifying device, etc., may be used instead of conventional time 
information. Then, the entire collation information is encrypted and is 
transmitted from an anatomical information collecting device to an 
authentication device via a network. 

ABSTRACT WORD COUNT: 106 

NOTE: 

Figure number on first page: 10 8 
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